General
- Target 2026-07-07_6aff6408dd4441beb220bcc4dc5ff93a_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 12.1MB
- Sample260707-tk9mnshz6k
- SHA256 51fb2390aafbf951195a83684bd3c417f462d0180b9fd4fe25f5c1f656ac535b
- MD5 6aff6408dd4441beb220bcc4dc5ff93a
- SHA1 882e151aace472822503bd53682df3c67bc8babe
- SHA512 bd7674c25450e3f32c7f7ba61db08023e36887306bd02e8db5cfc9dbeef39d679959dcc8d257ae5c872d2acc3be4bfb037c40f1c72d6bc860579fcb42d4bace2
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLyu5x6M1WoDDklJ6qqUHxqPFeLJ+YPppCpU2h:Qi8kL3Hxzli8kL3Hxz/2Vh
- TLSH T13ED6AF03F2D500E9D06AC134D7669532EA72BC460B21E6DF2698F65A2F73BD05B3A713
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_6aff6408dd4441beb220bcc4dc5ff93a_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_6aff6408dd4441beb220bcc4dc5ff93a_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_6aff6408dd4441beb220bcc4dc5ff93a_akira_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 12.1MB
- SHA256 51fb2390aafbf951195a83684bd3c417f462d0180b9fd4fe25f5c1f656ac535b
- MD5 6aff6408dd4441beb220bcc4dc5ff93a
- SHA1 882e151aace472822503bd53682df3c67bc8babe
- SHA512 bd7674c25450e3f32c7f7ba61db08023e36887306bd02e8db5cfc9dbeef39d679959dcc8d257ae5c872d2acc3be4bfb037c40f1c72d6bc860579fcb42d4bace2
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLyu5x6M1WoDDklJ6qqUHxqPFeLJ+YPppCpU2h:Qi8kL3Hxzli8kL3Hxz/2Vh
- TLSH T13ED6AF03F2D500E9D06AC134D7669532EA72BC460B21E6DF2698F65A2F73BD05B3A713
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry